Thank you Pablo 1. Now I have multiple build errors 'undeclared here' when building dpdk for example aes_gcm_enc_128_sse . I'm trying to find where these are declared 2. Regarding the crypto-device - I have Intel x540-AT2 Nic Regards Avi
> -----Original Message----- > From: De Lara Guarch, Pablo [mailto:[email protected]] > Sent: Tuesday, 07 November, 2017 1:24 PM > To: Avi Cohen (A); Thomas Monjalon > Cc: [email protected]; [email protected] > Subject: RE: [dpdk-users] IPsec offload > > Hi Avi, > > > -----Original Message----- > > From: Avi Cohen (A) [mailto:[email protected]] > > Sent: Tuesday, November 7, 2017 8:55 AM > > To: De Lara Guarch, Pablo <[email protected]>; Thomas > > Monjalon <[email protected]> > > Cc: [email protected]; [email protected] > > Subject: RE: [dpdk-users] IPsec offload > > > > > > > > Thank you Pablo > > > > Can you supply an example command line to run the ipsec-secgw ? > > > > > > ./examples/ipsec-secgw/build/ipsec-secgw -l 10,11 -n 4 -- > > > vdev="crypto_aesni_gcm0" / > > > -- -p 0x1 -P --config="(0,0,10)" -f ep-sample.cfg > > > > > > Where ep-sample.cfg contains: > > > > > > sp ipv4 out esp protect 0010 pri 1 dst 001.0.0.0/24 sport 0:65535 > > > dport 0:65535 sa out 0010 aead_algo aes-128-gcm aead_key > > de:ad:be:ef:de:ad:be:ef:de:ad:be: > > > ef:de:ad:be:ef:de:ad:be:ef mode ipv4-tunnel src 20.0.0.0 dst > > > 21.0.0.0 rt ipv4 dst > > > 21.0.0.0/8 port 0 > > > > > [Avi Cohen (A)] > > > > When running it almost all parameters from the config file starting from " > > sa out 0010" are not recognized by the application Do I have to > > create any additional objects before running it ? I don't see it in the > documentation . > > I want to run IPsec offload over ethernet port Best Regards Avi > > You need to make sure that you have a crypto device (SW or HW) that support > the algorithms set in the sa lines. > For instance, the "SA line" above is using AES-GCM, so you could use the AESNI > GCM PMD, with the command line above (using --vdev). > > Regards, > Pablo
